turbot/azure_compliance
Loading controls...

Control: Audit Windows machines on which the Log Analytics agent is not connected as expected

Description

Requires that prerequisites are deployed to the policy assignment scope. Machines are non-compliant if the agent is not installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg returns that it is registered to a workspace other than the ID specified in the policy parameter.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.compute_vm_log_analytics_agent_installed_windows

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.compute_vm_log_analytics_agent_installed_windows --share

SQL

This control uses a named query:

compute_vm_log_analytics_agent_installed_windows

Tags